Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/34352e3232392e3137312e302f32342d3234203d3e20323636363934.roa
File:                     34352e3232392e3137312e302f32342d3234203d3e20323636363934.roa (raw, json)
Hash identifier:          WhUgxjS9yJaqa2majrUyqSb3IiW4/PNCR8qrRRf10KQ=
Subject key identifier:   99:03:C6:E5:A8:69:EA:4A:7A:98:57:71:0C:4D:8A:EA:50:4A:DF:4D
Certificate issuer:       /CN=F16271A6D5A5968361D977B117B0281F2D2B08AE
Certificate serial:       25492B8FFB90202806FEE2E8E5B57559539C4D12
Authority key identifier: F1:62:71:A6:D5:A5:96:83:61:D9:77:B1:17:B0:28:1F:2D:2B:08:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/34352e3232392e3137312e302f32342d3234203d3e20323636363934.roa
Signing time:             Tue 28 May 2024 17:35:02 +0000
ROA not before:           Tue 28 May 2024 17:30:02 +0000
ROA not after:            Tue 27 May 2025 17:35:02 +0000
asID:                     266694
IP address blocks:        45.229.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:49:2b:8f:fb:90:20:28:06:fe:e2:e8:e5:b5:75:59:53:9c:4d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16271A6D5A5968361D977B117B0281F2D2B08AE
        Validity
            Not Before: May 28 17:30:02 2024 GMT
            Not After : May 27 17:35:02 2025 GMT
        Subject: CN=9903C6E5A869EA4A7A9857710C4D8AEA504ADF4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4c:30:a5:c9:fd:62:4b:93:d3:86:74:e3:aa:
                    41:9b:14:99:62:7f:ab:0b:9e:78:18:38:5e:51:30:
                    57:c4:d7:d4:13:51:0a:bc:07:03:e8:01:28:6b:e1:
                    a4:81:ec:6c:16:dc:af:2b:0f:c1:45:e3:d9:4f:dc:
                    32:91:b8:54:07:33:de:5e:91:8c:2f:e0:6c:6a:08:
                    16:fa:6e:5f:42:06:18:e4:a7:6d:1f:4a:90:93:81:
                    61:14:92:f5:d5:2d:ac:d5:8f:0c:b4:a6:16:f1:e7:
                    a0:f8:76:cd:a8:26:c9:45:22:69:c7:de:7f:ba:cc:
                    6e:30:08:cd:e3:7f:36:3d:f2:0c:ba:09:6f:d1:7e:
                    85:60:cb:7f:82:cf:63:9f:ec:54:6e:ea:19:c7:12:
                    69:29:00:5e:5e:fd:81:1f:78:0a:08:14:01:cc:43:
                    ab:86:ce:1f:97:79:c1:21:f1:b4:04:94:18:1e:66:
                    64:32:3a:3f:2c:7e:06:f7:33:85:b4:0d:f8:ae:2e:
                    ff:b2:1d:d8:23:76:4b:22:c4:5c:4d:a4:c7:0c:40:
                    4c:64:d3:db:87:14:31:d0:7b:dd:da:45:6d:1c:55:
                    e2:dc:30:90:5a:6c:c0:78:2d:bb:49:d6:f4:71:ae:
                    6b:8f:0d:18:2a:63:9e:39:f4:f7:91:a3:ba:01:ad:
                    cc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:03:C6:E5:A8:69:EA:4A:7A:98:57:71:0C:4D:8A:EA:50:4A:DF:4D
            X509v3 Authority Key Identifier:
                keyid:F1:62:71:A6:D5:A5:96:83:61:D9:77:B1:17:B0:28:1F:2D:2B:08:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/34352e3232392e3137312e302f32342d3234203d3e20323636363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:83:72:1c:14:24:05:e7:33:91:60:53:96:b1:0b:6a:cc:02:
         56:fe:bd:d6:26:04:21:2a:69:14:a1:fc:03:e0:35:de:8b:ae:
         53:4a:d2:58:fe:1a:8e:40:d3:0b:56:3b:db:33:6f:97:56:2d:
         0e:c2:1c:42:46:04:ff:8b:83:c8:5a:8a:a2:f2:32:29:a7:f8:
         83:d8:3d:13:14:bc:90:c6:41:e7:ee:10:7e:24:9a:3b:5d:da:
         59:60:0d:a3:0d:ee:7e:2b:2d:32:fa:15:05:ee:ad:41:6f:40:
         47:31:f8:2d:4e:2f:3e:46:99:98:82:95:06:9d:cf:eb:11:42:
         96:7d:a2:a8:82:61:5b:dc:8d:80:33:6b:d7:5b:22:83:ac:c6:
         82:5c:80:bc:22:31:c2:54:93:d8:d9:df:92:4c:65:7a:de:b1:
         82:c0:f4:19:c3:ae:0a:83:e8:d1:2b:3e:06:23:90:eb:0d:a1:
         99:2d:b8:5f:0c:56:22:62:b4:c3:cd:e1:b4:94:5f:48:75:44:
         d2:03:aa:5b:3b:5b:6c:cb:5c:ce:ed:fd:5f:ee:01:a5:cd:1b:
         7d:54:08:b0:06:4f:ca:55:ff:06:05:8f:c2:e6:ae:e6:d2:59:
         a1:e4:6f:b1:88:f4:a5:85:bb:0f:6c:04:3d:d3:f9:20:22:fe:
         6d:6d:23:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org